Skip to content
fr Sign in
7.8 High

CVE-2024-56334 systeminformation is a System and OS information library for node.js

Description

systeminformation is a System and OS information library for node.js. In affected versions SSIDs are not sanitized when before they are passed as a parameter to cmd.exe in the `getWindowsIEEE8021x` function. This means that malicious content in the SSID can be executed as OS commands. This vulnerability may enable an attacker, depending on how the package is used, to perform remote code execution or local privilege escalation. This issue has been addressed in version 5.23.7 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products and versions

Product Affected versions Fixed in
systeminformation 5.23 earliest → < 5.23.7 5.23.7

References

Timeline

  1. Published
  2. Last modified

Other CVEs of systeminformation

The 15 CVEs of systeminformation →
CVE-2026-116674 systeminformation is a System and OS information library for node.js 6.5 Medium CVE-2026-116673 systeminformation is a System and OS information library for node.js 3.3 Low CVE-2026-116576 systeminformation is a System and OS information library for node.js 7.8 High CVE-2026-50289 systeminformation is a System and OS information library for node.js 8.7 High
Track this CVE